$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38f4fccd-2824-3356-9c3a-da2fcf349fe7.roa File: 38f4fccd-2824-3356-9c3a-da2fcf349fe7.roa (raw, json) Hash identifier: 6CW9v/7Sxu0Bqzvh9KkFJX6FxAZK/p76dfgBFaH3dys= Subject key identifier: 24:68:91:75:58:12:87:E6:90:7E:1C:B0:19:6F:D5:E1:DA:D9:7A:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC7A1BA175B9F69B887D1CB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38f4fccd-2824-3356-9c3a-da2fcf349fe7.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.15.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:ba:17:5b:9f:69:b8:87:d1:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=362c9607-cb25-42a0-b847-340faadf75f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:56:09:0f:fe:f9:d0:f6:68:78:11:38:27:0d: f9:89:5f:b3:d2:32:3e:58:13:eb:09:2d:9c:ac:76: 2c:17:92:15:7e:f0:6b:a7:ee:4b:e0:f2:a2:37:bb: 9b:4e:a8:d4:99:39:ba:70:64:b0:79:31:19:73:22: c5:bc:df:92:f2:ca:fb:f0:c1:09:e0:a5:a1:d6:c0: 4f:20:f5:f5:ca:30:11:a0:23:eb:af:d6:04:52:44: 2b:30:88:43:3d:a2:00:d0:96:34:87:c0:c8:7b:ab: 80:94:38:c3:8a:a9:1a:f2:96:2f:09:60:65:85:12: 2a:ca:ce:c8:e5:c1:19:c3:58:27:bc:7f:22:4d:a1: a0:ee:fb:0a:d0:d4:d3:0a:96:44:55:aa:0d:57:3b: 18:eb:52:fb:6b:ba:08:ed:a0:61:c7:69:e8:04:2f: 26:f6:b0:f4:a9:78:99:58:14:ee:82:80:5e:ee:12: 8b:1c:e5:a9:07:d5:40:92:d9:8c:d8:5e:7e:d4:9e: c9:68:35:31:c8:a1:7f:19:06:f0:90:3b:ea:d0:a0: 98:8e:45:f8:87:7a:21:87:52:2e:45:b9:ee:35:25: 03:76:19:59:37:c4:f0:85:74:72:d1:db:aa:ac:d0: d0:4f:87:de:60:93:3b:76:0d:79:29:7a:fc:ae:82: 14:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:68:91:75:58:12:87:E6:90:7E:1C:B0:19:6F:D5:E1:DA:D9:7A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38f4fccd-2824-3356-9c3a-da2fcf349fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b1:29:6b:5e:f9:b4:f5:dd:b7:59:24:74:c7:58:48:b7:54: 21:82:11:ec:a5:ce:e3:7f:14:6d:97:91:b7:64:8a:b1:f2:dc: b9:bd:f2:92:15:04:42:cc:4f:0a:5d:3b:3d:fc:08:e0:32:50: c5:ad:b8:e4:0b:3f:c9:9b:4a:30:00:5d:83:99:eb:71:df:08: 10:65:77:af:ce:1d:60:15:78:24:92:ed:2b:1f:4b:22:98:1f: 96:92:5c:78:92:0c:aa:eb:18:08:6a:9e:f5:cb:f5:ef:ff:fa: f4:85:35:88:c1:97:15:c8:38:85:58:f1:8d:a1:56:7b:e3:c8: 6a:d5:04:26:a3:b5:91:84:5a:e1:89:69:0b:5c:35:2d:35:a1: b2:7c:16:af:34:44:67:f7:49:86:1d:24:31:95:65:03:0d:0e: 81:df:42:80:44:97:d3:58:96:5b:43:5b:b3:9e:9f:e7:b9:39: 64:37:2a:92:20:2f:2e:b0:a0:aa:61:43:c1:9f:e5:3d:2c:00: 94:c9:51:bc:11:8e:56:ae:d3:6f:01:45:5e:ac:a1:c4:63:a9: b8:8f:d2:25:2d:c6:b0:bd:b8:53:a2:76:da:5a:cb:20:bc:af: 6b:00:c3:1d:14:ab:55:09:8e:42:93:e4:6d:65:6f:19:55:0c: 2f:de:d9:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoboXW59puIfRywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzYyYzk2MDctY2IyNS00MmEwLWI4NDctMzQwZmFhZGY3NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFYJD/750PZoeBE4Jw35iV+z0jI+WBPrCS2c rHYsF5IVfvBrp+5L4PKiN7ubTqjUmTm6cGSweTEZcyLFvN+S8sr78MEJ4KWh1sBP IPX1yjARoCPrr9YEUkQrMIhDPaIA0JY0h8DIe6uAlDjDiqka8pYvCWBlhRIqys7I 5cEZw1gnvH8iTaGg7vsK0NTTCpZEVaoNVzsY61L7a7oI7aBhx2noBC8m9rD0qXiZ WBTugoBe7hKLHOWpB9VAktmM2F5+1J7JaDUxyKF/GQbwkDvq0KCYjkX4h3ohh1Iu RbnuNSUDdhlZN8TwhXRy0duqrNDQT4feYJM7dg15KXr8roIUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRokXVYEofmkH4csBlv1eHa2XpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzhmNGZjY2QtMjgyNC0z MzU2LTljM2EtZGEyZmNmMzQ5ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyxKWte+bT13bdZJHTHWEi3VCGCEeylzuN/FG2XkbdkirHy3Lm98pIV BELMTwpdOz38COAyUMWtuOQLP8mbSjAAXYOZ63HfCBBld6/OHWAVeCSS7SsfSyKY H5aSXHiSDKrrGAhqnvXL9e//+vSFNYjBlxXIOIVY8Y2hVnvjyGrVBCajtZGEWuGJ aQtcNS01obJ8Fq80RGf3SYYdJDGVZQMNDoHfQoBEl9NYlltDW7Oen+e5OWQ3KpIg Ly6woKphQ8Gf5T0sAJTJUbwRjlau028BRV6socRjqbiP0iUtxrC9uFOidtpayyC8 r2sAwx0Uq1UJjkKT5G1lbxlVDC/e2V4= -----END CERTIFICATE-----Generated at Sat Sep 5 06:53:54 2026 by rpki-client